Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/5CB91DF97360349E24A68011B9AA38E673D7975A.cer
File:                     5CB91DF97360349E24A68011B9AA38E673D7975A.cer (raw, json)
Hash identifier:          VigRHEm8b6Ak8J1ZhMAFXBZwqeFnnveR1uZ/XfgzLdc=
Subject key identifier:   5C:B9:1D:F9:73:60:34:9E:24:A6:80:11:B9:AA:38:E6:73:D7:97:5A
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       65B5F4BA034FABA1B8E0C2DF1240BB1DB4BF29C8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/6W3kFbvnDR5bRQMACWft4zuqXaAX1Y4wc8vJttmd5zsH/0/5CB91DF97360349E24A68011B9AA38E673D7975A.mft
caRepository:             rsync://rpki-repo.registro.br/repo/6W3kFbvnDR5bRQMACWft4zuqXaAX1Y4wc8vJttmd5zsH/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 01 Mar 2022 13:31:56 +0000
Certificate not after:    Tue 28 Feb 2023 13:36:56 +0000
Subordinate resources:    AS: 271286
                          IP: 190.109.92.0/22
                          IP: 2804:7920::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:b5:f4:ba:03:4f:ab:a1:b8:e0:c2:df:12:40:bb:1d:b4:bf:29:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Mar  1 13:31:56 2022 GMT
            Not After : Feb 28 13:36:56 2023 GMT
        Subject: CN=5CB91DF97360349E24A68011B9AA38E673D7975A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:43:40:45:83:34:d1:40:42:84:ad:22:96:2e:
                    fd:d0:1f:16:8c:a1:aa:77:0c:da:10:6c:99:7e:04:
                    a4:19:6d:47:cf:00:18:d9:a9:24:66:d5:40:06:f6:
                    b4:cb:5a:ea:ab:1d:f0:0e:5f:6c:9b:23:66:88:90:
                    30:df:87:05:57:39:b5:e1:26:ff:85:c7:96:25:7e:
                    cd:4e:66:d5:d2:1e:0c:33:2e:f5:9f:34:62:5d:77:
                    14:68:3d:fb:02:db:db:9e:8a:34:4a:a2:ab:46:2d:
                    e7:9a:b6:5a:6a:a4:45:ef:f4:6e:16:b3:50:07:98:
                    de:1d:f7:aa:b8:49:a1:85:ae:42:b0:ad:fb:07:e7:
                    00:24:53:1d:35:bc:d0:56:64:9d:15:98:f3:47:88:
                    8b:e0:b5:8a:dd:8f:a3:a9:4b:be:bf:f5:50:c7:72:
                    a3:ad:b4:41:b6:0e:2d:25:ab:90:c2:35:89:cc:62:
                    20:02:5f:70:5d:94:7d:0a:60:a5:1a:3e:3c:12:30:
                    91:07:7c:c5:d3:f7:fa:2d:23:ba:8d:b9:e8:74:78:
                    da:64:c3:91:de:fc:4f:f2:79:10:40:0b:dd:1a:fc:
                    7f:e9:da:59:74:aa:00:ca:00:eb:e9:42:be:ca:c1:
                    9d:9f:f7:8b:77:4d:42:94:7c:66:47:61:1b:be:24:
                    86:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                5C:B9:1D:F9:73:60:34:9E:24:A6:80:11:B9:AA:38:E6:73:D7:97:5A
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/6W3kFbvnDR5bRQMACWft4zuqXaAX1Y4wc8vJttmd5zsH/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/6W3kFbvnDR5bRQMACWft4zuqXaAX1Y4wc8vJttmd5zsH/0/5CB91DF97360349E24A68011B9AA38E673D7975A.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.109.92.0/22
                IPv6:
                  2804:7920::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271286

    Signature Algorithm: sha256WithRSAEncryption
         8f:aa:a9:31:07:ce:92:31:e9:56:d3:f3:75:fb:cd:88:d0:c3:
         5b:77:ed:c7:78:0a:28:c2:f5:aa:74:5b:7a:a7:07:04:e7:43:
         50:a6:42:a6:ef:8a:d7:f2:49:b4:58:5a:39:17:e8:73:c0:37:
         57:b8:64:95:d8:49:54:0f:2c:16:7b:f6:1e:df:2f:bd:77:59:
         3a:04:d7:e2:53:79:a2:95:ab:71:72:4e:48:bf:65:34:a5:29:
         31:9c:75:9d:13:db:59:19:2a:42:8e:16:b7:1f:27:67:01:cc:
         5f:d1:49:18:e0:01:0d:0f:96:fd:1d:98:9f:36:10:78:c6:47:
         53:cc:7d:38:8a:14:42:83:29:ba:02:a2:0d:ac:fa:ee:c6:3e:
         af:e2:94:72:c1:3b:30:23:be:be:1f:bb:d4:98:60:da:2f:84:
         d8:b9:a0:48:7e:55:4e:c9:b1:5b:70:8c:3b:e1:39:aa:ea:17:
         b4:ee:8a:0a:8e:14:e6:9b:0b:b8:38:b1:14:2a:a6:e0:67:80:
         95:a1:9e:9f:3d:c9:c6:c4:d3:ee:3c:47:92:41:2f:9f:2a:fd:
         43:51:b0:23:ca:6a:9b:1b:2f:f1:89:4a:39:41:66:52:1f:7b:
         9b:9e:e6:47:73:b0:34:c4:eb:51:24:89:32:88:ab:02:fe:4c:
         f9:44:b8:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:29 2024 by rpki-client on console-ams.rpki-client.org